Amazon
SOA-C02 · Question #422
A company is building an interactive application for personal finance. The application stores financial data in Amazon S3, and the data must be encrypted. The company does not want to provide its…
The correct answer is D. Use server-side encryption with AWS KMS managed encryption keys (SSE-KMS) to encrypt the. https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#auditing_key_use
Submitted by olafpl· Mar 30, 2026Security and Compliance
Question
A company is building an interactive application for personal finance. The application stores financial data in Amazon S3, and the data must be encrypted. The company does not want to provide its own encryption keys. However, the company wants to maintain an audit trail that shows when an encryption key was used and who used the key. Which solution will meet these requirements?
Options
- AUse client-side encryption with client-provided keys. Upload the encrypted user data to Amazon
- BUse server-side encryption with S3 managed encryption keys (SSE-S3) to encrypt the user data
- CUse server-side encryption with customer-provided encryption keys (SSE-C) to encrypt the user
- DUse server-side encryption with AWS KMS managed encryption keys (SSE-KMS) to encrypt the
How the community answered
(26 responses)- A4% (1)
- B4% (1)
- C12% (3)
- D81% (21)
Explanation
https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#auditing_key_use
Topics
#SSE-KMS#S3 encryption#KMS audit trail#key management
Community Discussion
No community discussion yet for this question.